Privacy

Last updated 8 August 2026

This site collects as little as it possibly can. It sets no cookies, runs no analytics, and loads nothing from anyone else's servers. The only personal data it asks for is an email address, and only if you choose to give it.

Who is responsible

This site and the Lacecult mailing list are run by Laceblonde, operating from outside the European Union. Laceblonde is the controller for the personal data described here, within the meaning of Art. 4(7) GDPR.

For anything concerning your personal data — a copy of it, a correction, deletion, or a question about this policy — write to:

lacecult@laceblonde.com

That address reaches the person responsible directly. No data protection officer has been appointed; the processing described here is not of a scale that requires one.

What is collected

1. The Lacecult mailing list

If you enter your email address into the form on the home page and submit it, that address is sent to our email provider and stored on the mailing list. Three further pieces of information travel with it, generated automatically:

source — records that you signed up on laceblonde.com rather than anywhere else.
cohort — records that you joined during the early period, so we can tell long-standing subscribers apart from later ones.
consent time — the date and time you submitted the form. We are required to be able to demonstrate that you consented (Art. 7(1) GDPR), and this is how.

Purpose: Sending you occasional email about music, releases and shows.
Legal basis: Your consent, Art. 6(1)(a) GDPR.
Processor: Kit (Kit.com, Inc., formerly ConvertKit), United States — under a data processing agreement in line with Art. 28 GDPR.
Transfer outside the EU: Yes. The list itself is held by Kit in the United States, safeguarded by Kit's certification under the EU–U.S. Data Privacy Framework and by the EU Standard Contractual Clauses in Kit's data processing addendum. Laceblonde operates from outside the EU and reads the list from there.
Retention: Until you unsubscribe. After that your address is kept on a suppression list, and nothing else, so that we do not accidentally email you again.
Obligation: None. Giving your address is entirely voluntary; the only consequence of not giving it is that you do not get the emails.

You can withdraw your consent at any time, with effect for the future. Every email we send carries an unsubscribe link, and one click is enough. You can also simply write to us. Withdrawing does not affect the lawfulness of anything processed before you withdrew.

We do not sell, rent, trade or share the mailing list. It is not passed to labels, promoters, advertisers or anyone else.

2. Server logs

The site is hosted by Vercel Inc. (United States), on infrastructure that automatically records technical information about each request: IP address, date and time, the page requested, HTTP status, referring page, and browser and operating system identifiers. This happens for every website you visit anywhere, and it is what makes it possible to serve a page at all.

Purpose: Delivering the site, keeping it stable, and defending it against attack and abuse.
Legal basis: Legitimate interests, Art. 6(1)(f) GDPR — our interest in a site that works and is not knocked over. We do not use these logs to build any picture of you.
Processor: Vercel Inc., United States — under a data processing agreement with the EU Standard Contractual Clauses.
Retention: Short, and automatic. Logs age out on the host's own retention schedule and are not exported, archived or combined with anything else.

What this site does not do

Worth stating plainly, because most sites do all of it:

No cookies. The site sets none at all, so there is no cookie banner and nothing to consent to.
No local storage. Nothing is written to your device.
No analytics. No Google Analytics, no Meta pixel, no heatmaps, no session recording, no counting of any kind.
No third-party requests. The fonts, the images and the code are all served from this domain. In particular the typefaces are self-hosted rather than loaded from Google Fonts, so simply opening this site does not disclose your IP address to Google or anyone else.
No advertising, and no data sold or shared for advertising.
No profiling and no automated decision-making within the meaning of Art. 22 GDPR.

Links to other places

The home page links out to Spotify, YouTube, Instagram, TikTok, and to a pre-save link for the single, which is a click-tracking address operated by DistroKid. Nothing is embedded — these are ordinary links, so no data goes anywhere until you actually click one.

Once you click, you are on someone else's service and their privacy policy governs what happens, not this one. We have no control over and no insight into what they collect.

Your rights

Under the GDPR you have the right to:

Access your data and receive a copy of it (Art. 15).
Correct anything inaccurate (Art. 16).
Erasure — have it deleted (Art. 17).
Restrict how it is processed (Art. 18).
Portability — receive it in a machine-readable format, or have it sent to another provider (Art. 20).
Object to processing based on legitimate interests (Art. 21).
Withdraw consent at any time (Art. 7(3)).

To use any of these, write to lacecult@laceblonde.com. We will respond within one month, as Art. 12(3) requires. There is no charge.

You also have the right to complain to a data protection supervisory authority (Art. 77). If you are in the EU or EEA, that is the authority in the country where you live or where you work — you do not have to come to us first, although we would rather you did, because it is usually faster.

Children

This site is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has signed up, write to us and we will delete the record.

Security

The site is served over HTTPS, so the connection between your browser and it is encrypted, including anything you type into the signup form. No method of transmission over the internet is perfectly secure, but the data involved here is deliberately kept to the minimum: an email address and a timestamp.

Changes

If this policy changes, the revised version appears on this page with a new date at the top. If a change materially affects how your data is used, subscribers will be told by email rather than left to notice it.